CVE-2023-48728: XSS

Published Jan 10, 2024

Updated

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

Affected Software

2 affected components

WWBN AVideo=3c6bb3ff

WWBN AVideo=11.6

Event History

Jan 10, 2024

CVE Published

via MITRE·03:48 PM

Data Sourced

via MITRE·03:48 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-48728?

CVE-2023-48728 is classified as a high severity vulnerability due to its potential for arbitrary JavaScript execution.

How do I fix CVE-2023-48728?

To fix CVE-2023-48728, update to the latest version of WWBN AVideo that addresses this cross-site scripting vulnerability.

Which versions of WWBN AVideo are affected by CVE-2023-48728?

CVE-2023-48728 affects WWBN AVideo versions 11.6 and the dev master commit 3c6bb3ff.

What type of vulnerability is CVE-2023-48728?

CVE-2023-48728 is a cross-site scripting (XSS) vulnerability.

Can CVE-2023-48728 be exploited remotely?

Yes, an attacker can exploit CVE-2023-48728 by tricking a user into visiting a specially crafted webpage.